2 matches found
Change Storefront to force clients to download a specific Workspace App package
When downloading Workspace App from Storefront landing page, it is pulling the most recent version instead of specific desired Workspace App package...
7.1AI score
SaveExploits0
Authentication Bypass
Overview Affected versions of this package are vulnerable to Authentication Bypass. The perpetrator who previously obtained an old expired user token could use it to access Storefront API v2 endpoints. Remediation Upgrade spree to version 3.7.11, 4.0.4, 4.1.11 or higher. References - GitHub Commi...
9.1CVSS6.9AI score0.01064EPSS
SaveExploits0References2
20